2022 CVEs (page 13)
Page 13 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-49793 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() dev_set_name() all… |
CVE-2022-49792 | High | 7.3 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: mp2629: fix potential array out of bound access Add sentinel at end of maps to… |
CVE-2022-49791 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: io_uring: fix multishot accept request leaks Having REQ_F_POLLED set doesn't guarantee th… |
CVE-2022-49790 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: Input: iforce - invert valid length check when fetching device IDs syzbot is reporting un… |
CVE-2022-49789 | High | 7.0 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: zfcp: Fix double free of FSF request when qdio send fails We used to use the wrong… |
CVE-2022-49788 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() `struct vmci_event_qp`… |
CVE-2022-49787 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() pci_get_device()… |
CVE-2022-49786 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: properly pin the parent in blkcg_css_online blkcg_css_online is supposed to p… |
CVE-2022-49785 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Add overflow check in sgx_validate_offset_length() sgx_validate_offset_length()… |
CVE-2022-49784 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/uncore: Fix memory leak for events array When a CPU comes online, the per-CP… |
CVE-2022-49783 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Drop fpregs lock before inheriting FPU permissions Mike Galbraith reported the f… |
CVE-2022-49782 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: perf: Improve missing SIGTRAP checking To catch missing SIGTRAP we employ a WARN in __per… |
CVE-2022-49781 | Medium | 4.7 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: Fix crash due to race between amd_pmu_enable_all, perf NMI and throttling a… |
CVE-2022-49780 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() If device_regi… |
CVE-2022-49779 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case In __unregister_… |
CVE-2022-49778 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: arm64/mm: fix incorrect file_map_count for non-leaf pmd/pud The page table check trigger… |
CVE-2022-49777 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: Input: i8042 - fix leaking of platform device on module removal Avoid resetting the modul… |
CVE-2022-49776 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: macvlan: enforce a consistent minimal mtu macvlan should enforce a minimal mtu of 68, eve… |
CVE-2022-49775 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: tcp: cdg: allow tcp_cdg_release() to be called multiple times Apparently, mptcp is able t… |
CVE-2022-49774 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86/xen: Fix eventfd error handling in kvm_xen_eventfd_assign() Should not call even… |
CVE-2022-49773 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix optc2_configure warning on dcn314 [Why] dcn314 uses optc2_configure_… |
CVE-2022-49772 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() snd_usbmidi_output_open… |
CVE-2022-49771 | Medium | 4.7 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: dm ioctl: fix misbehavior if list_versions races with module loading __list_versions will… |
CVE-2022-49770 | Critical | 9.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ceph: avoid putting the realm twice when decoding snaps fails When decoding the snaps fai… |
CVE-2022-49769 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: gfs2: Check sb_bsize_shift after reading superblock Fuzzers like to scribble over sb_bsiz… |
CVE-2022-49768 | High | 7.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: 9p: trans_fd/p9_conn_cancel: drop client lock earlier syzbot reported a double-lock here… |
CVE-2022-49767 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: 9p/trans_fd: always use O_NONBLOCK read/write syzbot is reporting hung task at p9_fd_clos… |
CVE-2022-49766 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: netlink: Bounds-check struct nlmsgerr creation In preparation for FORTIFY_SOURCE doing bo… |
CVE-2022-49765 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net/9p: use a dedicated spinlock for trans_fd Shamelessly copying the explanation from Te… |
CVE-2022-49764 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: bpf: Prevent bpf program recursion for raw tracepoint probes We got report from sysbot [1… |
CVE-2022-49763 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix use-after-free in ntfs_attr_find() Patch series "ntfs: fix bugs about Attribute… |
CVE-2022-49762 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ntfs: check overflow when iterating ATTR_RECORDs Kernel iterates over ATTR_RECORDs in mft… |
CVE-2022-42450 | Medium | 4.6 | 2025-04-30 | Improper sanitization of SVG files in HCL Domino Volt allows client-side script injection in deployed applications. |
CVE-2022-42449 | Medium | 4.6 | 2025-04-30 | Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications |
CVE-2022-27562 | Medium | 4.6 | 2025-04-30 | Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications. |
CVE-2022-41871 | Medium | 6.0 | 2025-04-28 | SEPPmail through 12.1.17 allows command injection within the Admin Portal. An authenticated attacker is able to execute arbitrary code in the context of the us… |
CVE-2022-44760 | Medium | 4.6 | 2025-04-24 | Unsafe default file type filter policy in HCL Leap allows execution of unsafe JavaScript in deployed applications. |
CVE-2022-44759 | Medium | 4.6 | 2025-04-24 | Improper sanitization of SVG files in HCL Leap allows client-side script injection in deployed applications. |
CVE-2022-47112 | Low | 2.5 | 2025-04-19 | 7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected. |
CVE-2022-47111 | Low | 2.5 | 2025-04-19 | 7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected. |
CVE-2022-26323 | | 2025-04-17 | Incorrect Use of Privileged APIs vulnerability in OpenText™ Operations Bridge Manager, OpenText™ Operations Bridge Suite (Containerized), OpenText™ UCMDB ( Cla… | |
CVE-2022-43852 | Medium | 5.3 | 2025-04-14 | IBM Aspera Console 3.4.0 through 3.4.4 could disclose sensitive information in HTTP headers that could be used in further attacks against the system. |
CVE-2022-43851 | Medium | 5.9 | 2025-04-14 | IBM Aspera Console 3.4.0 through 3.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. |
CVE-2022-43850 | Medium | 5.4 | 2025-04-14 | IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… |
CVE-2022-43847 | Medium | 5.4 | 2025-04-14 | IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow a… |
CVE-2022-43840 | Medium | 4.3 | 2025-04-14 | IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to an XPath injection vulnerability, which could allow an authenticated attacker to exfiltrate sensitive… |
CVE-2022-49761 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: btrfs: always report error in run_one_delayed_ref() Currently we have a btrfs_debug() for… |
CVE-2022-49760 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix PTE marker handling in hugetlb_change_protection() Patch series "mm/huget… |
CVE-2022-49759 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: VMCI: Use threaded irqs instead of tasklets The vmci_dispatch_dgs() tasklet function call… |
CVE-2022-49758 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: reset: uniphier-glue: Fix possible null-ptr-deref It will cause null-ptr-deref when resou… |
CVE-2022-49757 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: EDAC/highbank: Fix memory leak in highbank_mc_probe() When devres_open_group() fails, it… |
CVE-2022-49756 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: phy: usb: sunplus: Fix potential null-ptr-deref in sp_usb_phy_probe() sp_usb_phy_probe()… |
CVE-2022-49755 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait While performing fast compositi… |
CVE-2022-49754 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix a buffer overflow in mgmt_mesh_add() Smatch Warning: net/bluetooth/mgmt_ut… |
CVE-2022-49753 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix double increment of client_count in dma_chan_get() The first time dma_chan… |
CVE-2022-49752 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() The 'paren… |
CVE-2022-49751 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: w1: fix WARNING after calling w1_process() I got the following WARNING message while remo… |
CVE-2022-49750 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Add u64 casts to avoid overflowing The fields of the _CPC object are unsig… |
CVE-2022-49749 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: i2c: designware: use casting of u64 in clock multiplication to avoid overflow In function… |
CVE-2022-49748 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: fix potential integer overflow on shift of a int The left shift of int 32 b… |
CVE-2022-49747 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: erofs/zmap.c: Fix incorrect offset calculation Effective offset to add to length was bein… |
CVE-2022-49746 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init If the function sdm… |
CVE-2022-49745 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: fpga: m10bmc-sec: Fix probe rollback Handle probe error rollbacks properly to avoid leaks. |
CVE-2022-49744 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: mm/uffd: fix pte marker when fork() without fork event Patch series "mm: Fixes on pte mar… |
CVE-2022-49743 | High | 7.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: ovl: Use "buf" flexible array for memcpy() destination The "buf" flexible array needs to… |
CVE-2022-49742 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: f2fs: initialize locks earlier in f2fs_fill_super() syzbot is reporting lockdep warning a… |
CVE-2022-49741 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: fbdev: smscufx: fix error handling code in ufx_usb_probe The current error handling code… |
CVE-2022-49740 | High | 7.1 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads This… |
CVE-2022-49739 | High | 7.1 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: gfs2: Always check inode size of inline inodes Check if the inode size of stuffed (inline… |
CVE-2022-49738 | High | 7.1 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on i_extra_isize in is_alive() syzbot found a f2fs bug: BUG… |
CVE-2022-39163 | Medium | 4.7 | 2025-03-26 | IBM Cognos Controller 11.0.0 through 11.1.0 is vulnerable to a Client-Side Desync (CSD) attack where an attacker could exploit a desynchronized browser connect… |
CVE-2022-1804 | Medium | 5.5 | 2025-03-25 | accountsservice no longer drops permissions when writting .pam_environment |
CVE-2022-49737 | High | 7.7 | 2025-03-16 | In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by… |
CVE-2022-29059 | Low | 2.7 | 2025-03-14 | An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] in FortiWeb version 7.0.1 and below, 6.4.2 and b… |
CVE-2022-48610 | Medium | 5.5 | 2025-03-10 | This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2. An app may be abl… |
CVE-2022-43454 | High | 7.8 | 2025-03-10 | A double free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2… |
CVE-2022-49733 | High | 7.8 | 2025-03-02 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC There is a small race window at snd_pcm_oss_s… |
CVE-2022-49732 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: sock: redo the psock vs ULP protection check Commit 8a59f9d1e3d4 ("sock: Introduce sk->sk… |
CVE-2022-25773 | Medium | 4.3 | 2025-02-26 | This advisory addresses a file placement vulnerability that could allow assets to be uploaded to unintended directories on the server. * Improper Limitatio… |
CVE-2022-49731 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() In an unlikely (and pr… |
CVE-2022-49729 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred Similar to the handling of play_de… |
CVE-2022-49728 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix signed integer overflow in __ip6_append_data Resurrect ubsan overflow checks an… |
CVE-2022-49727 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg When len >= INT_MAX - transhdrlen… |
CVE-2022-49726 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: clocksource: hyper-v: unexport __init-annotated hv_init_clocksource() EXPORT_SYMBOL and _… |
CVE-2022-49725 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: i40e: Fix call trace in setup_tx_descriptors After PF reset and ethtool -t there was call… |
CVE-2022-49724 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tty: goldfish: Fix free_irq() on remove Pass the correct dev_id to free_irq() to fix this… |
CVE-2022-49723 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/reset: Fix error_state_read ptr + offset use Fix our pointer offset usage in err… |
CVE-2022-49722 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix memory corruption in VF driver Disable VF's RX/TX queues, when it's disabled. VF… |
CVE-2022-49721 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: arm64: ftrace: consistently handle PLTs. Sometimes it is necessary to use a PLT entry to… |
CVE-2022-49720 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: block: Fix handling of offline queues in blk_mq_alloc_request_hctx() This patch prevents… |
CVE-2022-49719 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: irqchip/gic/realview: Fix refcount leak in realview_gic_of_init of_find_matching_node_and… |
CVE-2022-49718 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: irqchip/apple-aic: Fix refcount leak in aic_of_ic_init of_get_child_by_name() returns a n… |
CVE-2022-49717 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: irqchip/apple-aic: Fix refcount leak in build_fiq_affinity of_find_node_by_phandle() retu… |
CVE-2022-49716 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions of_get_child_by_name()… |
CVE-2022-49715 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions of_find_node_by_phandle(… |
CVE-2022-49714 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: irqchip/realtek-rtl: Fix refcount leak in map_interrupts of_find_node_by_phandle() return… |
CVE-2022-49713 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix memory leak in dwc2_hcd_init usb_create_hcd will alloc memory for hcd, and… |
CVE-2022-49712 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe of_parse_phandle() retur… |
CVE-2022-49711 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove() In fsl_mc_bus_remove()… |
CVE-2022-49710 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: dm mirror log: round up region bitmap size to BITS_PER_LONG The code in dm-log rounds up… |